Remote Code Inclusion Vulnerability in ActADUR by ProTNS

CVE-2025-3621

What is CVE-2025-3621?

The ActADUR local server product from ProTNS is subject to multiple vulnerabilities, including Remote Code Inclusion due to improper neutralization of special command elements. Additionally, issues such as the use of hard-coded credentials and improper authentication further compound the security risks. Users are advised to update their installations to version 2.0.2.0 or newer to mitigate these vulnerabilities, especially as the software binds to an unrestricted IP address, exposing systems to additional threats.

References